que faire des resultats scan hijackThis?? Résolu/Fermé

Question

Bonjour,
Bonjour tout le monde,
voila j'ai fais un scan avec HijackThis, mais comme je suis novice en informatique et un peu blonde lol, je ne sais que faire ou que bouger des résultats obtenu.
si quelqu'un pouvait me donner un petit cou de main ce serais super gentil !!! merci 


Logfile of HijackThis v1.99.1
Scan saved at 12:55:06, on 27/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\windows\system32\dwdsrngt.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: adssite - {F31B3634-12AA-41ca-B021-0685C3B3E4CA} - C:\WINDOWS\system32
soA.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [{C1-14-46-6C-ZN}] c:\windows\system32\dwdsrngt.exe P2D002
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Startup: TA_Start.lnk = C:\WINDOWS\system32\dwdsrngt.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://scarlet.extrafilm.be/ImageUploader4.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.be/clients/uploader_v2.2.0.6.cab
O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://www.gamenext.fr/online/online2/bejeweled2/Oberongamesloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

Utilisateur anonyme · Answer

salut à toi,
http://leblogdeclaude.blogspot.com/2007/06/bienvenue-sur-ccm.html
fais ceci:
--------------
décris ton  problème avec le plus de précision possible.
pourquoi tu n'as pas trop de réponses ?
https://leblogdeclaude.blogspot.com/2006/11/informatique-petite-mise-au-point-sur.html
-------------------------
ensuite fais ceci:
https://leblogdeclaude.blogspot.com/2007/03/informatique-procdure-de-nettoyage.html
-------------------
repostes ensuite un nouveau log Hijackthis.
a+



*****Dans chaque église, il y a toujours quelque chose qui cloche******
Je n'ai pas la prétention de résoudre les problèmes, j'essaie simplement de rendre service ;-)

stéphie13 · Answer

grand merci à toi!!!! philo2100,

j'ai bien suivi ce que tu m'as indiqué, j'espere ne pas avoir été trop blonde sur ce cou là hummm lol
voici le résultat qu'il en sort.


Logfile of HijackThis v1.99.1
Scan saved at 16:44:05, on 27/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Nouveau dossier\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://scarlet.extrafilm.be/ImageUploader4.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.be/clients/uploader_v2.2.0.6.cab
O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://www.gamenext.fr/online/online2/bejeweled2/Oberongamesloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

Utilisateur anonyme · Answer

cocher + fixer
https://leblogdeclaude.blogspot.com/2007/05/comment-utiliser-hijackthis-fixer.html
-----

 	O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://www.gamenext.fr/online/online2/bejeweled2/Oberongamesloader.cab
--------ensuite fais ceci:

https://leblogdeclaude.blogspot.com/2007/03/informatique-procdure-navifix.html

stéphie13 · Answer

Re bonsoir philo2100,
voila je pense que je place mon message au bonne endroit cette fois, 
après quelque dérapage sur le site hummmm




Search Navipromo version 3.1.1 commencé le jeu. 27/09/2007 à 18:34:14,57 

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! 
!!! Poster ce rapport sur le forum pour le faire analyser !!! 
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!! 

Fix lancé depuis C:\Program Files
avilog1 
Mise a jour le 21.09.2007 a 18h00 by IL-MAFIOSO 


Microsoft Windows XP [version 5.1.2600] 
Internet Explorer : 6.0.2900.2180 


*** Recherche Programmes installes *** 




*** Recherche dossiers dans C:\WINDOWS *** 



*** Recherche dossiers dans C:\Program Files *** 



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data *** 




*** Recherche dossiers dans C:\Documents and Settings\Stephanie Matagne\Application Data *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 *** 


*** Recherche avec BlackLight Engine/F-secure *** 
BlackLight Engine est un produit de F-secure, pour + d'infos : 
https://www.f-secure.com/en 

Fichier(s) caché(s) : 

C:\WINDOWS\system32\avjejfyuav.dat 
C:\WINDOWS\system32\avjejfyuav.exe 
C:\WINDOWS\system32\avjejfyuav_navfx.dat 
C:\WINDOWS\system32\avjejfyuav_navps.dat 

Processus caché(s) : 

C:\WINDOWS\system32\avjejfyuav.exe 


*** Recherche avec GenericNaviSearch *** 
!!! Tous Ces résultats peuvent révéler des fichiers légitimes !!! 
!!! A verifier impérativement avant toute suppression manuelle !!! 

* Scan C:\WINDOWS\system32 * 

Fichiers trouvés : 

avjejfyuav.exe trouvé ! 

* Scan C:\Documents and Settings\Stephanie Matagne\local settings\application data * 



*** Recherche fichiers *** 


C:\WINDOWS\pack.epk trouvé ! 
C:\WINDOWS\system32
vs2.inf trouvé ! 


*** Recherche cles registre *** 

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire *** 
(Recherche fichiers spécifiques) 

1)Recherche fichiers connus: 

2)Recherche Heuristique : 

C:\WINDOWS\system32\avjejfyuav.dat trouvé ! 


3)Recherche Certificats : 

Certificat Egroup trouvé ! 


*** Analyse Terminé le jeu. 27/09/2007 à 18:40:17,95 ***

Utilisateur anonyme · Answer

Bien...on a mis le doigt sur des virus cachés !
refaits donc un scan Navilog, mais cette fois-ci avec l'option 2.
https://leblogdeclaude.blogspot.com/2007/03/informatique-procdure-navifix.html
postes le rapport ici.

Utilisateur anonyme · Answer

ok ^^Marie^^----> répondu ;-)

stéphie · Answer

Bonjour philo2100, 
comment ca vas aujour d'huy?
j'ai bien fais ce que tu me conseil,
juste que je trouve que ça à été super vite cette fois, l'étappe 2 désinfection automatique avec prise en charge...(en mode sans echec bien sur)
ça a prit 2min et puis j'ai eu un message (arrêt système....) puis il sait remis en mode normal tout seul et la j'ai eu un rapport, 
j'espère que c'est bien ça qu'il fallait faire?
et le pc et encore plus lent cette fois.

voici le rapport:



 
Clean Navipromo version 3.1.1 commencé le ven. 28/09/2007 à 16:07:17,65

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 21.09.2007 a 18h00 by IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180

Mode suppression automatique
sans prise en charge résultats Blacklight et GNS



*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\Stephanie Matagne\Application Data ***


*** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Stephanie Matagne\Local Settings\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :


*** Sauvegarde du registre vers dossier Backupnavi ***

sauvegarde du registre réalise avec succes !

*** Nettoyage registre ***

Nettoyage registre Ok


*** Certificats ***

Certificat Egroup absent !



*** Nettoyage termine le ven. 28/09/2007 à 16:09:17,12 ***

Utilisateur anonyme · Answer

pour en avoir le coeur-net....
refais Navilog avec l'option 1, colles le rapport.

stéphie13 · Answer

Bonjour philo2100,

voila le résultat de navilog1,






Search Navipromo version 3.1.1 commencé le sam. 29/09/2007 à 11:22:45,60

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 21.09.2007 a 18h00 by IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 


*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Stephanie Matagne\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
https://www.f-secure.com/en


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of October, 2007.
Version information: 2.2.1064.

[+] Started on 09/29/07 at 11:22:52.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items ............................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 09/29/07 at 11:27:39 (return code = 0).


*** Recherche avec GenericNaviSearch ***
!!! Tous Ces résultats peuvent révéler des fichiers légitimes !!!
!!! A verifier impérativement avant toute suppression manuelle !!!

* Scan C:\WINDOWS\system32 *

* Scan C:\Documents and Settings\Stephanie Matagne\local settings\application data *



*** Recherche fichiers *** 




*** Recherche cles registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse Terminé le sam. 29/09/2007 à 11:28:15,92 ***

Utilisateur anonyme · Answer

Bien, c'est clean...
fais ceci:
https://leblogdeclaude.blogspot.com/2007/04/informatique-procdure-smitfraud.html

stéphie · Answer

Bonjour, 
merci à toi et ton aide,
 tu as ete de super bon conseil!  ton block est super bien fais et tres facile a suivre et surtout tres clair.
je te tire mon chapeau tu es un géni!!!

Utilisateur anonyme · Answer

ok,
merci ...
fais ceci:

https://leblogdeclaude.blogspot.com/2007/04/informatique-procdure-smitfraud.html
copie le rapport

stéphie13 · Answer

bonjour à toi,

voici le rapport 


SmitFraudFix v2.233

Rapport fait à 12:39:04,21, dim. 30/09/2007
Executé à partir de D:\programmes nettoyage\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Stephanie Matagne


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Stephanie Matagne\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\STEPHA~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 172.19.3.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{FA4CD576-328E-4B64-BEFF-E8AA93D7DC4F}: DhcpNameServer=172.19.3.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{FA4CD576-328E-4B64-BEFF-E8AA93D7DC4F}: DhcpNameServer=172.19.3.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{FA4CD576-328E-4B64-BEFF-E8AA93D7DC4F}: DhcpNameServer=172.19.3.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=172.19.3.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=172.19.3.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=172.19.3.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

clean..
fais ceci et postes le rapport...normalement ça devrait confirmer.
https://leblogdeclaude.blogspot.com/2007/08/scan-de-votre-machine-avec-genproc.html

stéphie13 · Answer

voila je viens de le faire, ça ne sais pas vraiment dérouler comme tu l'explique, mais j'ai eu bloc note,
voici ce qu'il indique.


IZArc version 3.81
Copyright© 2007 by Ivan Zahariev
All Rights Reserved

=========================== WHAT'S NEW ===========================
Version 3.81 (Build 1550)

-Fixed: Zip files and folders with non English names
-Fixed: Split/Merge Zip archives containing non English filenames
-Fixed: Extract CAB SFX archives
-Fixed: Show the amount of extracted files from TGZ archives.
-Updated translations

==================================================================
Version 3.8 (Build 1510)

-Fixed: Shell context menu under Windows Vista (Now IZArc is 100% Vista (32-bit) compatible)
-Fixed: Confirm File Overwrites when extracting *.tar.gz archives
-Fixed: Compress folders with file names beginning with dot (.test)
-Fixed: Shortcuts working directory when do CheckOut
-Fixed: Modify and update files in subfolders
-Fixed: Drag and Drop folder from an archive to Windows Explorer does not extract subfolders
-Fixed: Extraction process is terminated if some error occurs
-Fixed: Extract multi-volume ARJ archives
-Fixed: Check for update
-Fixed: Zip SFX archive crashes when is unable extracting directory to be created
-Added  option to compress/extract archives in background (low process priority)
-Added  7-Zip SFX creation support
-Updated UnRar library
-Some small improvements
-Updated translations

=================================================================
Version 3.7 (Build 1430)

-Fixed: extract archives in folders with too long names
-Fixed: extract of RAR archives with non English filenames
-Fixed: add hundreds of selected files using shell context menu
-Fixed: create CAB archives containing files and folders with relative path
-Fixed: create/update ZIP archives on USB drive
-Fixed: extracting of .Z archives containing files with no extension
-Fixed: print Archive content
-Fixed: open an archive from favorites folders
-Fixed: extract ARJ SFX archives
-Fixed: 100% CPU usage when open file from an archive
-Fixed: modify encrypted files from archives
-Fixed: wrong file extension when convert an archive
-Improved 7-Zip BCJ2 compression
-Added "Open with IZArc" shell context menu item for all supported archives
-Added option to show shell context menu items for compressing archives
-Added option to include/exclude folder information when using "Add to.." shell context menu items
-Updated UnRar library
-Some small improvements
-Updated translations

=================================================================
Version 3.6 (Build 1260)

-Added support for BZip compression for ZIP archives (WinZip 9 compatible)
-Added support for ZIP AES (128, 192 and 256 bit) encryption (WinZip 9 compatible)
-Added support for archives > 4GB
-Added support for store empty subfolders
-Improved "Add files" dialog
-Added different icons for every archive type that is associated with IZArc
-Added "Clear History" option
-Added "Import/Export Settings" options
-Removed file browser. Now IZArc starts faster
-Fixed: extracting of GZip (.gz) archives
-Fixed: extracting files with duplicated names in archives by drag and drop
-Fixed: update of status bar when select files using keyboard
-Fixed: progress bar status when compress/extract 7-Zip archives
-Fixed: using Windows colors for IZArc main controls
-Removed error message when open empty ZIP archives
-Date format used by IZArc is synchronized with Windows current date format
-Updated 7-zip32, UnAce and UnRar libraries
-Some small improvements and bugs fixing

=================================================================
Version 3.5 beta 3

-Fixed Drag&Drop to Windows
-Fixed ACE archives support
-Fixed uncompressing TAR.GZ archives
-Correctly saving and restoring columns positions
-Password support when creating 7zip archives
-SFX stubs now are installed under IZArc folder
-Increased Recent Archives history from 5 to 10
-Some small bug fixes and improvements
-New/Updated translations

=================================================================
Version 3.5 beta 2

-Added CD/DVD Images support (Open and extract) - (ISO, BIN, MDF, NRG, IMG, C2D, PDI, CDI)
-Added CD Image Converter tool (Bin -> ISO, MDF -> ISO, NRG -> ISO, PDI -> ISO)
-Added support for AVG Antivirus scanner version 7 (In IZArc configuration dialog, under "Program Locations"->"Virus Scanner" select avgw.exe from your AVG installation folder. Also put "/se" (without quotes) as parameter)
-Improved "Search in Archives" dialog
-Improved "CheckOut" dialog
-New/Updated translations

=================================================================
Version 3.5 beta 1

-Open an archive when drop it on the IZArc toolbar
-Fixed "Reuse IZArc windows" function so now it could be used to open archives faster
-Remove "Test" option from the shell context menu for CAB files.
-Perform automatic test when the "Test" dialog is shown
-"Search in Archives" window can be maximized now
-Fixed Date and time ordering in "Search in Archives" dialog
-Added scrollbars to the "Comments" window
-Fixed problem archiving .dll files under Windows 98
-Show an IZArc button on the Windows taskbar when performing some actions from the IZArc shell context menu
-Silent Installation possibility
-New/Updated translations
-New Skins
-Some small improvements and bugs fixing

=================================================================
Version 3.4.1.6

-Fixed installation bug on Windows 98
-New/Updated translations
-New skins
-Small improvements

=================================================================
Version 3.4.1.4

-Fixed Reuse IZArc Windows functionality when open archive from other opened one.
-Updated some translation files

=================================================================
Version 3.4.1.3

-Fixed some small bugs
-Some small improvements

=================================================================
Version 3.4.1

-Fixed problem with large CPU usage when open a file from an archive
-Added possibility to extract empty sub-folders
-Updated some translation files (Danish, Polish, French, Italian, Chinese)
-Added Estonian language support (thanks to Toomas Tomberg)
-Added new skins
-Fixed some small bugs
-Some small improvements

=================================================================
Version 3.4

-Removed "Password Hacker" functionality. It will be develop as a separate application.
-Added possibility to open, edit and automatically update files in the archive.
-Added "CheckOut Base Folder" option
-Added "Extract to <Folder Name>" item in Explorer context menu
-Added "Test" item in Explorer context menu
-Added "Open with IZArc" item in Explorer context menu (for SFX ".EXE" Archives)
-Fixed bug using IZArc under WinNT/2000/XP from standard users
-Fixed "Reuse IZArc Windows" function
-Fixed Command Line Interface (see the help file for more details)
-Fixed opening and extracting .TGZ archives
-Updated 7-zip32, Yz1 and UnRar DLL libraries
-Added Chinese language support (thanks to JAKE LIN)
-Added Taiwanese language support (thanks to JAKE LIN)
-Added Finnish language support (thanks to Niko Jakobsson)
-Added Japanese language support (thanks to chinQ)
-Added Swedish language support (thanks to Leif Larsson)
-Added Danish language support (thanks to Werner Knudsen)
-Added Hungarian language support (thanks to Leonard Nimoy)
-Added Russian language support (thanks to Sergey)
-Added Turkish language support (thanks to Murat CIZ)
-Added Spanish (Uruguay) language support (thanks to Gonzalo Ferreira)
-Added Spanish (Latin America) language support (thanks to Marcos A. Andrade Rodr?guez)
-Added Arabic language support (thanks to Khalid Al-Musaihij)
-Added Serbian (Cyrillic) and Serbian (Latin) language support (thanks to B. Jotev)
-Added Indonesian language support (thanks to Darojatun)
-Some small improvements
-New Skins

=================================================================
Version 3.3.1

-Fixed some small bugs
-Added new skins
-Some small improvements

=================================================================
Version 3.3

-Added possibility to convert multiple archives
-Skinnable Toolbar
-Select custom toolbar buttons feature
-Minimize to Tray feature
-Reuse IZArc Windows feature
-Added UnSFX tool (Convert self-extracting (SFX) .EXE files to standard archives)
-Encryption Support: Encrypt/Decrypt files or archives using Rijandael - AES (256-bits).
-Improved shell context menu options (Display context menu items in a submenu, Display icons on context menus)
-Fixed problem with opening ACE and RAR multi-volume sets
-Added Slovak language support (thanks to Roman D.)

=================================================================
Version 3.2.2

-Fixed Explorer Context Menu bugs
-Added "Extract to..." and "Extract Here" items to the menu which is displayed when a user drag and drops files with the right mouse button.
-Added Norwegian language support (thanks to Morten Lunde)
-Added Slovenian language support (thanks to Maksimiljan Gulie)
-Some small improvements

=================================================================
Version 3.2.1

-Added MIME (Base64) Encode/Decode support
-Added Create Multi-Volume Set tool - Now it is possible to split in PKZip/WinZip compatible  multi-volume archives (.z01, .z02, ..., .zip)
-Added Merge Multi-Volume Set tool
-Added translation info in the About box
-Convert tool improved. Added support for all archives supported by IZArc
-Some small improvements

=================================================================
Version 3.2

-Added Explorer Display Style - Now it is possible to navigate through
       an Archive like through folders in Windows Explorer.
-Added Virus Scan feature - Now it is possible to checking for viruses in an archive.
-Added 7-Zip Archives (*.7z) support (beta)
-Added CPIO Archives (*.cpio) support (beta - extract only)
-Added AR Archives (*.a; *.lib) support (beta - extract only)
-Added RPM Package (*.rpm) support (beta - extract only)
-Added Debian Package (*.deb) support (beta - extract only)
-Added BGA Archives (*.gza; *.bza) support (beta)
-Added GCA Archives (*.gca) support (beta - extract only)
-Added TAZ Archives (*.tar.z; *.taz; *.tz) support (beta - extract only)
-Added Yz1 Archives (*.yz1) support (beta)
-Added German language support (thanks to FoneBone)
-Added Dutch language support (thanks to Bert van Velsen)
-Added Czech language support (thanks to Adam Feistner)
-Added Spanish language support (thanks to Angel Velasco)
-Added French language support (thanks to Patrick Frasnier)
-Added Catalan language support (thanks to Pau Bosch i Crespo)
-Added Portuguese language support (thanks to Dayene Pacheco De Souza)
-Some small improvements

=================================================================
Version 3.1.6

-Updated UnAce and UnRar library
-Updated the help file
-Fixed open network file bug (thanks to Steve Basford for the test support)
-Some small improvements

=================================================================
Version 3.1.5

-Added View/Hide Columns option
-Improved open archive speed
-Improved "Extract to.." Explorer context menu item
 Now is possible to select multiple archive files for extraction
 in a single operation from the Explorer window.
-Added "Extract Here" Explorer context menu item
-Fixed some minor bugs

=================================================================
Version 3.1.1

-Change IZArc Icon
-Fixed some minor bugs

=================================================================
Version 3.1

-IZip is renamed to IZArc
-Some small improvements

=================================================================
Version 3.0b1

-Added support for BZip2 Archives: Now is possible to compress and decompress
  BZip2 Archives.
-Added "Repair Archive" feature: Repair broken ZIP archives.
-Added "Search in Archives" feature: Search in many archives for any files.
-Added "Favorite Folders" feature
-Improved the creation of SFX (Self-Extracting Archives) from ZIP archives
-Some small improvements
-Many bug fixes
le voici

Utilisateur anonyme · Answer

LOL..là tu as fais une erreur de manip....
je ne sais pas comment tu as fait...tu me donnes l'historique des différentes versions de Izarc, probable qu'à l'install tu n'as pas décocher l'option de montrer le fichier *.txt de l'historique des mises à jour....
------------------------------------------------------------------------------------------------------------------
télécharges ceci:
http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
installes-le.
lances le programme une fois installé, et copie le rapport ici.

stéphie13 · Answer

lol tu vois que je suis nul là dedans comme ça hihi
bon cette fois je crois que ça marche et je crois que tu vas être content du résultat aussi.
à oui j'ai installer l'anti virus Antivir je pense que tu le conseillais?
car le mien n'a pas passer le test du faux virus hummmm
et dernier petite question je dois garder les programmes que tu m'as fais installer?? que je les mets tourner de temps en temps???

[1] Aucune infection caractéristique trouvée !

Utilisateur anonyme · Answer

tu as réussis à lancer Genproc ?

stéphie13 · Answer

oui oui je pense lol
j'ai fais installer genproc puis ouvrire, exécuter 
et là j'ai eu 2 fenêtres avec fond bleu
la 1ere fois j'ai du pousser sur une touche, puis la 2eme à défiler et ma donner une page bloc, 
voici le résultat c'etait bien ça???

[2] Aucune infection caractéristique trouvée !

Utilisateur anonyme · Answer

bien, tu avances dans le bon sens...
fais ceci en utilisant Internet Explorer:
http://support.f-secure.fr/fra/home/ols.shtml
en cas de besoin, un tuto ici:
https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId974416

Nono9 · Answer

Bonjour à tous, voila j'ai eu un virus que je n'arrive pas à faire disparaitre alors j'ai fait un scan avec hijackthis et voici ce qu'il me donne: (je ne suis pas un pro en informatique^^) j'espere que l'on pourra m'aider
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\a-squared free\a2service.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\a-squared Free\a2free.exe
C:\Documents and Settings\Administrateur\Mes documents\Telechargements\HiJackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [platform bind axis time] C:\Documents and Settings\All Users\Application Data\soft ref platform bind\Pure 01.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKCU\..\Run: [logo vga] C:\DOCUME~1\ADMINI~1\APPLIC~1\WARN32~1\BITS ISO FACE.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: bw+0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6352742C-B19C-497A-B61E-086B4E17247C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - McAfee, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Que faire des resultats scan hijackThis??

21 réponses

Discussions similaires